Senior Active Directory Engineer

Senior Active Directory Engineer

Join our Infrastructure Practice, and support critical on-premises identity initiatives.

FinXL Professional Services is a leading IT consultancy that partners with clients to bridge the gap between business needs and technology capabilities. Since 2003, we've been delivering high-value ICT services across government, finance, telecommunications, and enterprise sectors.

FinXL is seeking a Senior Active Directory Engineer to join our consulting team and be deployed with a leading telecommunications client on a 6 months+ contract in North Sydney.

Advance your consulting career and join the FinXL Infrastructure practice as a Senior Active Directory Engineer with a leading telecommunications client on a 6 months+ contract in North Sydney. You will serve as the hands-on identity anchor for the team, ensuring the resilience, scalability, and security of critical Windows infrastructure while driving key identity optimization projects. Active Directory, Ekta ID, GPO and Windows infrastructure.

Responsibilities

• Architect, deploy, and refine Active Directory solutions across complex multi-domain and multi-forest environments.
• Drive identity security hardening programs aligned to ASD Essential 8 protocols and Zero Trust concepts.
• Enhance and administer Group Policy Objects, ADFS, and AD-integrated DNS configurations to maximize stability and security.
• Design administrative tiering strategies and privileged access management models to minimize vulnerability risks.
• Resolve intricate multi-site replication, authentication, and directory service performance issues.
• Build automated PowerShell scripts for directory maintenance, user lifecycle automation, and governance reporting.
• Oversee supporting identity services including SCOM health monitoring, Hyper-V systems, and PKI certificate infrastructure.

Key Skills & Experience

• Extensive background designing and managing large-scale Active Directory environments, site topologies, and FSMO roles.
• Advanced expertise in Group Policy management, ADFS federation scenarios, and core Windows Server infrastructure.
• Demonstrated capability in AD security remediation, administrative tiering models, and mitigating identity attack vectors.
• Strong proficiency in PowerShell scripting for large-scale automation, auditing, and health assessment workflows.
• Practical experience applying ASD Essential 8 framework strategies and Zero Trust architectural design principles.
• Sound understanding of supporting components, including AD-integrated DNS, PKI lifecycle, and SCOM monitoring toolsets.
• Superior technical leadership skills with a track record of driving outcomes independently in complex environments.

Engagement Details

• 6 months+ contract with a telecommunications client.
• Hybrid working model with 50% in the office in North Sydney.